Notices by famfo :riesifrogSnowman: (famfo@frogs.lgbt)

THEY REDACTED THE BASH REFERENCE MANUAL (yes they have the bash reference manual in there???)

Debugging PowerDNS sending spurious SERVFAILs with @merlin and @domi, every few minutes someone goes "SERVFAIL? Woah that's us"

@whitequark dpdk is technically userspace networking that works well /j

@whitequark this diagram haunts me in my dreams when I think about some people forwarding big up/downloads over this.

Big data. Through the userspace. Pinning a CPU core before saturating the link.

@eloy alpine doesn't use busybox init and rsyslog

Duality of my friend group

Sami regular reminder that Cloudflare issues certificates for all the domains given to them, even adding their own CAA records if some got set up. This behaviour can be disabled but is an insane default when not using the MITM as a service already.

https://developers.cloudflare.com/ssl/edge-certificates/caa-records/#caa-records-added-by-cloudflare

Who do I have to bribe to register the domain famfo.java?

@eloy oh no, 4-clause BSD toot :p

@lanodan the peak, yup

@taavi ah damn, how could we

Almost one million ANY queries to a single domain just on ONE server in ~1-2 minutes. Either someone is very insistent on getting a response to ANY over UDP or they just want us to generate traffic.

Today in doing authoritative DNS: amplification attacks

I guess at least we now know what the spikes in our monitoring are :riesiupsideDownFrog:

#servfail

@eth0 @upcloud @dns @domi @jn @eloy Eloy. I'm gonna seize your memes of production :riesifrogSoviet:

@dns @jn @domi @eloy @eth0 THAT'S IT, FEDI ADBLOCKER

@eth0 @domi @jn @eloy silence, brand

@eloy @jn @domi ima steal that display name

I am now staff btw

#OH BGP over DOCIS, do you know what that means? BGP in MPEG2 frames!

@domi I have no idea how and I keep forgetting to look that up until suddenly X11 gets installed